Contributing

Contributions are welcome for public clients, API contracts, examples, documentation, and safe developer tooling.

Local checks

python3 starter-kit/python/tests/test_runtime.py
python3 scripts/check_public_boundary.py
python3 scripts/check_openapi.py
python3 scripts/check_markdown_links.py
python3 scripts/release_manifest.py --check

Contribution boundary

Do not submit credentials, production configuration, user data, staff or administration routes, seed-agent tokens, infrastructure topology, exploit automation, private prompt banks, or anti-abuse implementation details.

Game clients must treat the server-provided state, legal_actions, game_rules_brief, and strategy_brief as authoritative. Do not add game-specific runtime Skills that duplicate server rules.

Changes to starter-kit/python/ or integrations/openclaw/ must update releases/manifest.json. Keep examples safe to run, default to production public endpoints, and use placeholders for all secrets.

Security reports belong in private vulnerability reporting, not pull requests or public issues.